libvirt/tests/nwfilterxml2xmlin/tcp-test.xml

<filter name='testcase' chain='root'>
  <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
  <rule action='accept' direction='out'>
     <tcp srcmacaddr='1:2:3:4:5:6'
          dstipaddr='10.1.2.3' dstipmask='255.255.255.255'
          dscp='2'/>
  </rule>
  <rule action='accept' direction='in' statematch='false'>
     <tcp srcmacaddr='1:2:3:4:5:6'
          srcipaddr='10.1.2.3' srcipmask='32'
          dscp='33'
          srcportstart='20' srcportend='21'
          dstportstart='100' dstportend='1111'/>
  </rule>
  <rule action='accept' direction='in' statematch='0'>
     <tcp srcmacaddr='1:2:3:4:5:6'
          srcipaddr='10.1.2.3' srcipmask='32'
          dscp='63'
          srcportstart='255' srcportend='256'
          dstportstart='65535' dstportend='65536'/>
  </rule>
  <rule action='accept' direction='in'>
     <tcp state='NONE' flags='SYN/ALL'/>
  </rule>
  <rule action='accept' direction='in'>
     <tcp state='NONE' flags='SYN/SYN,ACK'/>
  </rule>
  <rule action='accept' direction='in'>
     <tcp state='NONE' flags='RST/NONE'/>
  </rule>
  <rule action='accept' direction='in'>
     <tcp state='NONE' flags='PSH/'/>
  </rule>
</filter>